
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: ytmrZ62Woz9ACLAqs8D1fSK+eEQpEa3wny0D2MuVpYY=
Subject key identifier: 34:1B:1F:52:46:72:A7:25:FE:EE:94:2D:E1:F4:EF:1D:D2:03:02:B5
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 0199240D84148E5C9BE63BF3B0D556C0E4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 094F
Signing time: Sun 07 Sep 2025 12:01:29 +0000
Manifest this update: Sun 07 Sep 2025 12:01:29 +0000
Manifest next update: Mon 08 Sep 2025 12:01:29 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: SKxMl3T7hzT20cbW8Xo+jf1rXIEgIahyrcjzMnyp+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:84:14:8e:5c:9b:e6:3b:f3:b0:d5:56:c0:e4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Sep 7 12:01:29 2025 GMT
Not After : Sep 8 12:01:29 2025 GMT
Subject: CN=341b1f524672a725feee942de1f4ef1dd20302b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:e6:16:05:fb:c3:a2:b5:e4:1e:ee:bd:68:
c3:c2:d6:df:5c:36:07:35:36:b0:23:ad:6f:73:9f:
36:19:cf:5d:da:bb:09:b8:b5:9e:81:7e:71:f4:76:
39:21:49:93:97:82:f6:3c:25:2e:4c:59:49:17:0b:
c1:05:5f:76:1d:6b:1c:3e:c7:5a:62:e8:68:2e:6f:
86:24:54:18:4b:3a:cf:76:3c:8b:32:18:65:11:4d:
44:e9:87:83:ec:7e:f3:95:12:41:7c:88:fe:f8:ac:
b3:87:fb:fc:10:d5:f4:bc:9d:f9:4a:41:2a:7a:4c:
bc:84:22:5c:af:f4:1c:18:6b:b3:5f:35:75:65:c5:
a1:87:1f:2f:3a:ea:f8:18:06:7c:1c:76:28:c8:db:
20:38:9e:29:95:03:2b:92:1a:3a:cf:09:3c:03:d2:
f9:28:e1:c3:18:ab:77:f3:12:e3:5f:77:8d:2a:5a:
f4:86:da:ee:cd:8d:40:95:8b:b9:d7:3d:29:4d:91:
a6:34:b7:63:6b:a2:6f:e0:5f:35:82:6a:7c:ec:e3:
ca:c2:b2:20:ff:01:16:57:7f:76:27:12:88:f3:fa:
c4:c5:c6:88:25:f4:1e:60:21:98:06:51:76:db:c8:
94:4a:ba:80:a9:c8:1c:01:5a:21:e2:42:34:3f:35:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:1F:52:46:72:A7:25:FE:EE:94:2D:E1:F4:EF:1D:D2:03:02:B5
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:95:d8:96:57:36:c4:0b:6a:4f:be:ae:bf:7b:54:01:d1:56:
1a:af:5f:7a:80:2c:be:5f:63:01:18:ab:3e:1f:f6:4c:1b:2b:
18:7e:2e:3b:aa:20:62:e3:6c:20:f1:17:95:c1:33:c9:26:10:
5c:2d:51:74:85:78:33:a4:4b:ca:60:e6:b3:19:c0:3d:c9:8f:
4a:bc:28:8c:31:14:2b:8f:fd:07:94:f8:d8:0f:bb:eb:ca:c9:
bc:19:7f:14:ba:dc:89:b1:cb:a7:65:09:4e:88:a4:e9:63:69:
c1:c5:76:21:e1:5b:df:55:71:cf:ca:cb:29:ba:75:7b:83:c5:
20:17:6c:eb:5e:54:75:0c:97:93:e2:44:76:37:a1:04:f4:82:
2f:d8:c1:5c:89:1b:12:4b:c1:05:2a:70:00:d2:c6:52:55:7d:
20:50:d3:a0:18:0d:89:a1:7d:28:69:e4:16:33:da:1d:5f:16:
a4:5e:5d:c4:e9:1b:ae:fa:2a:d6:0d:55:2c:4f:fc:76:ad:40:
86:03:ac:50:c4:56:cb:0a:ff:5b:36:32:94:94:6c:b6:fa:49:
ef:1c:bd:70:09:a9:38:59:6a:c7:69:fc:6f:ca:06:a4:64:0e:
3f:97:ea:a5:2a:8e:4c:25:3a:11:3a:93:3d:05:95:27:23:03:
c0:b3:e0:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDYQUjlyb5jvzsNVWwOTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh
YjAwYWMwHhcNMjUwOTA3MTIwMTI5WhcNMjUwOTA4MTIwMTI5WjAzMTEwLwYDVQQD
EygzNDFiMWY1MjQ2NzJhNzI1ZmVlZTk0MmRlMWY0ZWYxZGQyMDMwMmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWTmFgX7w6K15B7uvWjDwtbfXDYH
NTawI61vc582Gc9d2rsJuLWegX5x9HY5IUmTl4L2PCUuTFlJFwvBBV92HWscPsda
YuhoLm+GJFQYSzrPdjyLMhhlEU1E6YeD7H7zlRJBfIj++Kyzh/v8ENX0vJ35SkEq
eky8hCJcr/QcGGuzXzV1ZcWhhx8vOur4GAZ8HHYoyNsgOJ4plQMrkho6zwk8A9L5
KOHDGKt38xLjX3eNKlr0htruzY1AlYu51z0pTZGmNLdja6Jv4F81gmp87OPKwrIg
/wEWV392JxKI8/rExcaIJfQeYCGYBlF228iUSrqAqcgcAVoh4kI0PzXr0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQbH1JGcqcl/u6ULeH07x3SAwK1MB8GA1UdIwQY
MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct
OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3
LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5XYllc2
xAtqT76uv3tUAdFWGq9feoAsvl9jARirPh/2TBsrGH4uO6ogYuNsIPEXlcEzySYQ
XC1RdIV4M6RLymDmsxnAPcmPSrwojDEUK4/9B5T42A+768rJvBl/FLrcibHLp2UJ
Toik6WNpwcV2IeFb31Vxz8rLKbp1e4PFIBds615UdQyXk+JEdjehBPSCL9jBXIkb
EkvBBSpwANLGUlV9IFDToBgNiaF9KGnkFjPaHV8WpF5dxOkbrvoq1g1VLE/8dq1A
hgOsUMRWywr/WzYylJRstvpJ7xy9cAmpOFlqx2n8b8oGpGQOP5fqpSqOTCU6ETqT
PQWVJyMDwLPgWw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:43 2025 by rpki-client